Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0b379c55-c247-3109-831b-d0d98c7f3668.roa
File:                     0b379c55-c247-3109-831b-d0d98c7f3668.roa (raw, json)
Hash identifier:          WQr4YHuYGjgWo7zYhz+2OB3Tau9wBFfK03pfJxBRenU=
Subject key identifier:   21:B1:13:37:57:99:E1:81:B0:56:D5:42:C3:F4:6D:C8:49:9F:8B:AC
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584EFF77708ACDE85FF2F7650280
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0b379c55-c247-3109-831b-d0d98c7f3668.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        130.137.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:70:8a:cd:e8:5f:f2:f7:65:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=8084ba36-da14-467c-b8b3-603c18c5c001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:0a:83:9d:5c:db:64:eb:04:68:fc:56:e7:
                    d2:73:8d:01:e1:19:e2:d8:4a:91:93:a8:17:07:9f:
                    92:0f:0b:14:be:27:e3:4d:b1:88:9f:e4:1f:62:6d:
                    fb:fb:21:07:7c:aa:7e:d9:10:28:75:e0:f9:c0:1b:
                    f5:a5:d0:2d:86:ac:9a:e5:a3:a1:a7:ef:2e:39:a7:
                    58:5d:ca:42:a3:12:bc:f9:1b:ca:b0:c6:5e:85:d4:
                    a3:38:aa:cf:ac:86:91:0d:d6:bb:52:b3:31:c1:37:
                    f8:b7:82:11:bc:bc:8a:52:d5:ba:53:90:2b:f0:3a:
                    aa:7c:de:3f:af:8c:21:2e:21:5a:a5:51:fe:f4:19:
                    6b:be:30:dd:34:ae:a3:9e:a6:e8:9b:d3:e4:90:93:
                    b6:6d:58:83:62:51:21:31:7f:04:86:71:e0:5d:d7:
                    02:5e:06:ce:69:26:5c:2c:40:cc:4f:4e:76:e2:f9:
                    04:03:cd:3e:47:93:ce:c7:19:38:a5:03:71:ec:35:
                    52:e9:02:f1:3f:85:df:c9:8e:e8:c6:e6:07:fe:03:
                    1e:8a:e1:ff:e7:83:47:dd:5d:39:53:c1:4f:8c:ef:
                    23:a2:2c:80:e8:ae:40:f2:dc:83:b7:6b:02:32:ec:
                    05:0c:5b:1a:d3:ce:02:dc:85:29:70:21:d5:bf:02:
                    81:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B1:13:37:57:99:E1:81:B0:56:D5:42:C3:F4:6D:C8:49:9F:8B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0b379c55-c247-3109-831b-d0d98c7f3668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c3:2b:00:bf:7a:41:e1:c1:1c:d1:0d:95:b0:ae:e7:12:2a:
         f1:10:d7:37:0e:f5:c2:5a:51:65:17:c4:71:71:bc:4a:6a:b7:
         e6:65:00:1f:13:6d:82:c2:46:34:f8:1e:52:47:42:fd:1d:01:
         fc:f3:71:42:f3:03:9f:d3:25:0f:0a:18:2e:7a:75:f6:cd:39:
         8e:a3:3d:b5:3c:98:95:45:01:80:83:36:4e:8f:27:62:9f:f9:
         58:fb:1b:44:74:83:48:b1:cd:d3:aa:9f:4d:28:48:df:f7:a5:
         eb:89:67:c0:f5:5d:bf:e4:52:15:4e:bd:3d:50:c3:ee:3d:fa:
         b6:d0:f5:f4:bb:8b:84:d8:86:22:07:2b:97:cb:7f:1e:4c:e8:
         40:36:2d:51:e6:74:be:8d:67:05:89:e4:74:c9:24:9a:b6:e6:
         35:2b:bf:66:4b:38:f6:0d:11:99:1c:58:1c:6a:d9:15:e7:2c:
         b5:ee:23:43:d0:34:64:9c:96:9d:af:c8:99:ff:8c:92:4a:a9:
         46:56:ed:0c:48:2f:b8:65:14:36:3a:fb:32:6f:9e:26:49:b9:
         a1:e5:2d:57:06:f9:9d:54:83:96:ed:99:2e:ad:71:13:f4:28:
         5c:3b:e6:7c:3f:ce:7d:46:42:3f:1b:53:c1:4b:53:09:9a:82:
         ae:c5:dd:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3CKzehf8vdlAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk
ODA4NGJhMzYtZGExNC00NjdjLWI4YjMtNjAzYzE4YzVjMDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF0Kg51c22TrBGj8VufSc40B4Rni2EqRk6gX
B5+SDwsUvifjTbGIn+QfYm37+yEHfKp+2RAodeD5wBv1pdAthqya5aOhp+8uOadY
XcpCoxK8+RvKsMZehdSjOKrPrIaRDda7UrMxwTf4t4IRvLyKUtW6U5Ar8DqqfN4/
r4whLiFapVH+9BlrvjDdNK6jnqbom9PkkJO2bViDYlEhMX8EhnHgXdcCXgbOaSZc
LEDMT0524vkEA80+R5POxxk4pQNx7DVS6QLxP4XfyY7oxuYH/gMeiuH/54NH3V05
U8FPjO8joiyA6K5A8tyDt2sCMuwFDFsa084C3IUpcCHVvwKBuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCGxEzdXmeGBsFbVQsP0bchJn4usMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMGIzNzljNTUtYzI0Ny0z
MTA5LTgzMWItZDBkOThjN2YzNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPDKwC/ekHhwRzRDZWwrucSKvEQ1zcO9cJaUWUXxHFxvEpqt+ZlAB8T
bYLCRjT4HlJHQv0dAfzzcULzA5/TJQ8KGC56dfbNOY6jPbU8mJVFAYCDNk6PJ2Kf
+Vj7G0R0g0ixzdOqn00oSN/3peuJZ8D1Xb/kUhVOvT1Qw+49+rbQ9fS7i4TYhiIH
K5fLfx5M6EA2LVHmdL6NZwWJ5HTJJJq25jUrv2ZLOPYNEZkcWBxq2RXnLLXuI0PQ
NGSclp2vyJn/jJJKqUZW7QxIL7hlFDY6+zJvniZJuaHlLVcG+Z1Ug5btmS6tcRP0
KFw75nw/zn1GQj8bU8FLUwmagq7F3do=
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:50:08 2026 by rpki-client